Child and family service Tusla has apologised to people at the centre of cases highlighted by the Data Protection Commissioner yesterday for the impact it had on them.

Three statutory inquiries have been opened by the Commission in relation to Tusla's compliance with General Data Protection Regulation (GDPR) since the EU-wide regulation came into effect in May 2018.

Speaking at an event organised by EPIC to celebrate young people in care, Tusla CEO Bernard Gloster said he did not want to pre-empt the final determination of the Data Protection Commissioner.

He said Tusla can never be complacent about the content and privacy of what it holds.

He said mistakes have been made, but he is working to put in place mechanisms and structures to reduce the risk to the greatest degree possible.

But he said they have a long way to go.

Asked if Tusla had apologised to the people at the centre of the cases he said where they fail they have to recognise that.

He said in the context of what the Data Protection Commissioner is due to report the people that have been impacted in some of the data breaches that impact had been from moderate to severe.

But he said for all of them it has been important and he said he wanted to recognise that difficulty and sincerely apologise for that.